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IN THE CLAIMS: 

1 . (PREVIOUSLY PRESENTED) A method for graphically presenting characteristics of 
data traffic on a distributed computer network, comprising: 

monitoring traffic on said network; 

selecting a characteristic of said traffic for display; 

obtaining a plurality of values of said characteristic for selected time intervals within 
a larger time interval; and 

presenting said characteristic by playing a rapid succession of graphical images, each 
graphical image representing said network as nodes connected by lines, said lines represent- 
ing traffic flow between nodes, each graphical image graphically representing the value of 
said characteristic at a particular selected time interval within the larger time interval with a 
property of at least one line of said lines, said property indicating a value of said characteris- 
tic. 

2-3. (CANCELLED) 

4. (ORIGINAL) The method as in claim 1, further comprising: 

using a width of said at least one line as said property. 

5. (ORIGINAL) The method as in claim 1, further comprising: 

using a color of said at least one line as said property. 

6. (ORIGINAL) The method as in claim 1, further comprising: 
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2 using an arrow drawn on said at least one line as said property. 

1 7. (ORIGINAL) The method as in claim 1, further comprising: 

2 using a length of said at least one line as said property. 

1 8. (ORIGINAL) The method as in claim 1 , further comprising: 

2 using a density of said at least one line as said property. 

1 9. (ORIGINAL) The method as in claim 1, further comprising: 

2 using a visual characteristic of said at least one line as said property. 

1 10. (ORIGINAL) The method as in claim 1 , further comprising: 

2 displaying a filtering expression in a graphical user interface; 

3 selecting, from said graphical user interface, records from network information files 

4 to display said characteristic of said traffic. 

1 11. (ORIGINAL) The method as in claim 1 0, further comprising: 

2 calculating parameters that are associated with the records selected from network files 

3 and storing the parameters in a local file. 

1 12. (CANCELLED) 

l 

2 13. (ORIGINAL) The method as in claim 1, further comprising: 
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3 using a filtering program to select records in network information files that meet se- 

4 lected filtering criteria. 

1 14. (PREVIOUSLY PRESENTED) The method as in claim 13, further comprising: 

2 compiling the selected records from network information files during the selected 

3 time intervals, each compiled record meeting at least one selected filtering criterion. 

1 15. (ORIGINAL) The method as in claim 14, further comprising: 

2 calculating data that represent the compiled records, and storing the data in a file. 

1 16. (PREVIOUSLY PRESENTED) The method as in claim 1 , further comprising: 

2 displaying a map of the network topology and overlaying the map with said succes- 

3 sion of graphical images. 

1 17. (PREVIOUSLY PRESENTED) The method of claim 1 4, further comprising: 

2 including a time interval criterion which indicates how often to compile and package 

3 information from the network information files. 

1 18. (PREVIOUSLY PRESENTED) The method of claim 1 , further comprising: 

2 defining the larger time interval with a starting time and an ending time specified 

3 within a filtering criteria. 

1 19. (PREVIOUSLY PRESENTED) A data visualization apparatus for graphically presenting 

2 characteristics of data traffic on a distributed computer network, comprising: 
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3 means for monitoring traffic on said network; 

4 means for selecting characteristics of said traffic for display; 

5 means for obtaining a plurality of values of said characteristics for selected time in- 

6 tervals within a larger time interval; and 

7 means for presenting said characteristics by playing a rapid succession of graphical 

8 images, each graphical image representing said network as nodes connected by lines, said 

9 lines representing traffic flow between nodes, each graphical image graphically representing 

10 the value of said characteristics at a particular time interval within the larger time interval 

1 1 with a property of at least one line of said lines, said property indicating a value of said char- 

12 acteristics. 

i 20-21. (CANCELLED) 

1 22. (ORIGINAL) The apparatus as in claim 19, further comprising: 

2 means for using a width of said at least one line as said property. 

1 23. (ORIGINAL) The apparatus as in claim 19, further comprising: 

2 means for a using a color of said at least one line as said property. 

1 24. (ORIGINAL) The apparatus as in claim 19, further comprising: 

2 means for using an arrow drawn on said at least one line as said property. 

1 25. (ORIGINAL) The apparatus as in claim 19, further comprising: 

2 means for using a length of said at least one line as said property. 
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1 26. (ORIGINAL) The apparatus as in claim 19, further comprising: 

2 means for using a density of said at least one line as said property. 

1 27. (ORIGINAL) The apparatus as in claim 19, further comprising: 

2 means for using a visual characteristic of said at least one line as said property. 

1 28. (PREVIOUSLY PRESENTED) The apparatus as in claim 19, further comprising: 

2 means for displaying a filtering expression in a graphical user interface; 

3 means for selecting, from said graphical user interface, records from network infor- 

4 mation files to display said characteristics of said traffic. 

1 29. (ORIGINAL) The apparatus as in claim 28, further comprising: 

2 means for calculating parameters that are associated with the records selected from 

3 network files and storing the parameters in a local file. 

i 30. (CANCELLED) 

1 31. (ORIGINAL) The apparatus as in claim 19, further comprising: 

2 means for using a filtering program to select records in network information files that 

3 meet selected filtering criteria. 

l 32. (PREVIOUSLY PRESENTED) The apparatus as in claim 3 1 , further comprising: 
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2 means for compiling the selected records from network information files during the 

3 selected time intervals, each compiled record meeting at least one selected filtering criterion. 

1 33. (ORIGINAL) The apparatus as in claim 32, further comprising: 

2 means for calculating data that represent the compiled records, and storing the data in 

3 a file. 

1 34. (PREVIOUSLY PRESENTED) The apparatus as in claim 1 9, further comprising: 

2 means for displaying a map of the network topology and overlaying the map with said 

3 succession of graphical images. 

1 35. (PREVIOUSLY PRESENTED) The apparatus as in claim 32, further comprising: 

2 means for including a time interval criterion which indicates how often to compile 

3 and package information from the network information files. 

1 36. (PREVIOUSLY PRESENTED) The apparatus as in claim 1 9, further comprising: 

2 means for defining the larger time interval with a starting time and an ending time 

3 specified within a filtering criteria. 

1 37. (PREVIOUSLY PRESENTED) A data visualization apparatus for graphically presenting 

2 characteristics of data traffic on a distributed computer network, comprising: 

3 a computer to monitor traffic on said network; 

4 a graphical user interface to select a characteristic of said traffic for display; 
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5 a reporting system executing on said computer to obtain a plurality of values of said 

6 characteristic for selected time intervals within a larger time interval; and 

7 a visualization system executing on said computer to present said characteristic by 

8 playing a rapid succession of graphical images, each graphical image representing said net- 

9 work as nodes connected by lines, said lines representing traffic flow between nodes, each 

10 graphical image graphically representing the value of said characteristic at a particular se- 
ll lected time interval within the larger time interval with a property of at least one line of said 
12 lines, said property indicating a value of said characteristics. 

i 38-39. (CANCELLED) 

1 40. (ORIGINAL) The apparatus as in claim 37, further comprising: 

2 instructions to execute in said computer to use a width of said at least one line as said 

3 property. 

1 41. (ORIGINAL) The apparatus as in claim 37, further comprising: 

2 instructions to execute in said computer to use a color of said at least one line as said 

3 property. 

1 42. (ORIGINAL) The apparatus as in claim 37, further comprising: 

2 instructions to execute in said computer to use an arrow drawn on said at least one 

3 line as said property. 



l 43. (ORIGINAL) The apparatus as in claim 37, further comprising: 
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2 instructions to execute in said computer to use a length of said at least one line as said 

3 property. 

1 44. (ORIGINAL) The apparatus as in claim 37, further comprising: 

2 instructions to execute in said computer to use a density of said at least one line as 

3 said property. 

1 45. (ORIGINAL) The apparatus as in claim 37, further comprising: 

2 instructions to execute in said computer to use a visual characteristic of said at least 

3 one line as said property. 

1 46. (ORIGINAL) The apparatus as in claim 37, further comprising: 

2 instructions to execute in said computer to display a filtering expression in a graphical 

3 user interface; 

4 instructions to execute in said computer to select, from said graphical user interface, 

5 records from network information files to display said characteristic of said traffic. 

1 47. (ORIGINAL) The apparatus as in claim 46, further comprising: 

2 instructions to execute in said computer to calculate parameters that are associated 

3 with the records selected from network files and storing the parameters in a local file. 

l 48. (CANCELLED) 

l 49. (ORIGINAL) The apparatus as in claim 37, further comprising: 
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instructions to execute in said computer to use a filtering program to select records in 
network information files that meet selected filtering criteria. 

50. (PREVIOUSLY PRESENTED) The apparatus as in claim 49, further comprising: 

instructions to execute in said computer to compile the selected records from network 
information files during the selected time intervals, each compiled record meeting at least 
one selected filtering criterion. 

51. (ORIGINAL) The apparatus as in claim 50, further comprising: 

instructions to execute in said computer to calculate data that represent the compiled 
records, and storing the data in a file. 

52. (PREVIOUSLY PRESENTED) The apparatus as in claim 37, further comprising: 

instructions to execute in said computer to display a map of the network topology and 
overlaying the map with said succession of graphical images. 

53. (PREVIOUSLY PRESENTED) The apparatus as in claim 50, further comprising: 

instructions to execute in said computer to include a time interval criterion which in- 
dicates how often to compile and package information from the network information files. 

54. (PREVIOUSLY PRESENTED) The apparatus as in claim 37, further comprising: 

instructions to execute in said computer to define the larger time interval with a start- 
ing time and an ending time specified within a filtering criteria. 
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1 55-56 (CANCELLED) 
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